Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/9a96fc03-8f97-3a0f-9047-8114a8e6578f.roa
File:                     9a96fc03-8f97-3a0f-9047-8114a8e6578f.roa (raw, json)
Hash identifier:          15VMQp/VMKrLmKdxAYTT1WNr00pqRgj/uu/MqK84qy8=
Subject key identifier:   D7:DF:F5:16:97:09:84:C1:C3:D6:D5:93:2B:51:A3:F7:E4:5B:E6:39
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328583F3A2AB650557ADE75775BFE80
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/9a96fc03-8f97-3a0f-9047-8114a8e6578f.roa
Signing time:             Thu 27 Aug 2020 16:37:55 +0000
ROA not before:           Thu 27 Aug 2020 16:37:55 +0000
ROA not after:            Mon 16 Dec 2024 05:00:00 +0000
asID:                     400377
IP address blocks:        199.101.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3a:2a:b6:50:55:7a:de:75:77:5b:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Aug 27 16:37:55 2020 GMT
            Not After : Dec 16 05:00:00 2024 GMT
        Subject: CN=fb2dd8b4-f752-4926-b684-fa18b766deaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:4c:1b:e3:16:a5:46:0e:b0:d3:fc:0b:fa:
                    aa:ef:ad:f4:fc:31:06:d5:e9:89:af:af:aa:51:b6:
                    0f:38:98:87:4a:50:7b:7b:3c:f9:16:e1:fd:ed:62:
                    29:b2:9e:ce:72:70:c6:2b:3d:ec:0a:60:4c:71:a3:
                    88:2f:04:5c:7e:f8:ca:4a:17:68:4e:ac:d1:62:06:
                    33:c9:b6:82:dd:cd:49:d0:86:32:82:3d:12:8d:b5:
                    e8:5a:c9:d3:25:76:51:4d:4c:ff:7d:06:b0:1a:ac:
                    0f:9a:9c:da:96:4f:f8:23:fe:d8:67:be:b0:d3:b8:
                    be:f8:fe:d6:df:38:e4:ce:55:20:17:a5:88:89:e4:
                    43:79:aa:dc:1d:e9:9d:e2:21:64:93:fa:90:c7:d7:
                    50:1d:8d:ac:df:26:4b:0d:a2:30:b0:b2:32:51:98:
                    6c:0e:78:35:9f:16:ba:a0:d7:a3:b3:be:01:2a:80:
                    22:0f:88:49:bc:0f:a6:3f:5d:97:d9:11:e5:90:d3:
                    fe:21:6f:cc:34:67:10:3b:d3:b3:e5:50:43:1f:e8:
                    b1:28:58:cf:b8:a1:bf:a0:6a:35:1e:f4:11:78:3a:
                    8f:39:32:23:d1:c5:79:0a:f3:b6:00:1b:10:ec:3d:
                    44:22:9f:14:18:92:07:bb:01:e7:89:f2:ff:12:69:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:F5:16:97:09:84:C1:C3:D6:D5:93:2B:51:A3:F7:E4:5B:E6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/9a96fc03-8f97-3a0f-9047-8114a8e6578f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:84:a2:07:2e:c3:c0:48:1e:ab:3c:27:c2:c5:2d:3c:29:94:
         85:71:b2:d1:29:7c:9d:bf:2f:35:65:5d:91:62:82:0a:2b:25:
         19:cd:d7:23:88:81:95:c9:08:70:48:13:c4:ef:29:a9:ed:c3:
         ec:50:47:e7:03:24:57:38:86:dc:31:d6:19:26:ab:bf:d4:5c:
         4a:58:84:2f:9e:e8:3e:58:da:a9:46:93:cd:6c:77:41:3d:20:
         83:06:66:09:fe:7a:59:44:bc:bb:17:b5:59:60:fd:29:d3:61:
         4b:2a:97:44:00:90:12:d8:a4:7a:a0:9c:43:62:98:07:26:54:
         d3:0e:d4:b9:94:81:9f:58:c6:24:a0:57:30:6a:32:46:92:50:
         d1:b6:7a:68:e8:a5:96:72:5c:27:13:c1:87:65:28:e8:11:16:
         e7:33:42:49:60:3d:8e:4b:16:d0:bd:a5:71:7c:24:9b:fe:93:
         0b:a5:36:0d:76:f8:c6:47:87:0d:af:10:cd:3f:90:f8:58:1d:
         4b:32:40:27:e7:66:58:d2:e4:0f:db:86:4c:3e:c1:41:b0:77:
         e8:b7:69:12:0d:a4:3d:9c:f5:72:bf:c7:e0:ed:4a:b6:56:a9:
         d0:6e:f7:bb:56:db:34:91:f4:f4:26:1e:a8:ff:83:f4:69:1c:
         b6:63:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----